@aexhq/sdk 0.35.0 → 0.36.0

package/README.md

@@ -8,9 +8,9 @@ aex is an agent execution platform for launching autonomous agents from a simple
 
 The package ships:
 
-- `Aex` / `AgentExecutor` for sessions, one-shot runs, inspect, download, cancel, and delete.
+- `Aex` for sessions, one-shot runs, inspect, download, cancel, and delete.
 - `sessions` / `openSession()` for durable, resumable agent sessions.
-- Typed run primitives: `Models`, `Providers`, `Sizes`, `Tool` / `Tools` (skill-tools), `AgentsMd`, `File`, `McpServer`, `ProxyEndpoint`, and `Secret`.
+- Typed run primitives: `Models`, `Providers`, `Sizes`, `Tool` / `Tools` (skill-tools), `AgentsMd`, `File`, `McpServer`, and `Secret`.
 - A bundled `aex` CLI with the same run, status, events, outputs, download, cancel, delete, and whoami operations.
 
 ## Install
@@ -119,33 +119,34 @@ you can `catch` by code; CLI failures print a JSON envelope carrying the HTTP
 `status`, a one-line `remedy`, and the `runId` where known, and a wrong `--model`,
 `--provider`, or `--runtime-size` gets a "did you mean?" suggestion.
 
-## Chat over a corpus of sessions
+## Continue with sessions
 
-Turn a selected set of sessions into a read-only chat.
-`createCorpusTools(client, { sessionIds })` returns vendor-neutral, corpus-scoped
-read tools (`list_sessions` / `get_session` / `list_outputs` / `read_output` /
-`search_outputs`) — every tool refuses a session outside the corpus. Drive them
-with any LLM; `examples/chat-corpus.ts` shows the direct-Claude loop
-(`@anthropic-ai/sdk`) on top of the LLM-vendor-free SDK.
+Use sessions for conversational flows. `run()` is the one-shot convenience; a
+`SessionHandle` is the lower-level surface when you want multiple turns,
+streaming, messages, events, outputs, or downloads.
 
-`aex.sessions.searchOutputs({ runIds, filename, extension, contentType, limit })`
-finds output files across sessions (scope with the `runIds` session-id allow-list)
-and returns references (no bytes) you then read with `aex.sessions.outputs(id).read(...)`.
+```ts
+const session = await aex.openSession(result.runId);
+const next = await session.send("Turn this into a checklist.").done();
+console.log(next.text);
+
+const messages = await session.messages().list();
+const outputs = await aex.sessions.outputs(session.id).list();
+```
 
 ## Feature Areas
 
 - **Agent runtime:** managed autonomous runs with filesystem read/edit, grep/glob/head/tail, open web fetch/search, background commands, code execution, git, and subagents.
 - **Durable infrastructure:** run records, status, wait/cancel/delete, idempotency, typed events, output capture, downloads, timeouts, and runtime sizes.
-- **Agent composition:** skills, files, AGENTS.md, remote MCP servers, proxy endpoints, environment variables, packages, and networking controls.
+- **Agent composition:** skills, files, AGENTS.md, remote MCP servers, environment variables, packages, and networking controls.
 - **Subagents:** typed parent/child lineage for async child runs, output handoff, and bounded agent delegation.
 - **Models and providers:** Anthropic, DeepSeek, OpenAI, Gemini, Mistral, OpenRouter, Doubao, and Doubao China behind one submission shape.
-- **Typed control surface:** strongly typed SDK inputs, CLI parity, BYOK secrets, scoped proxy auth, redaction, and output modes.
+- **Typed control surface:** strongly typed SDK inputs, CLI parity, BYOK provider keys, workspace secrets, redaction, and output modes.
 
 ## Docs
 
 - [Quickstart](docs/quickstart.md)
 - [Run configuration](docs/run-config.md)
-- [Agent tools](docs/concepts/agent-tools.md)
 - [Composition](docs/concepts/composition.md)
 - [Secrets](docs/secrets.md)
 - [Limits](docs/limits.md)

package/dist/_contracts/index.d.ts

@@ -1,15 +1,15 @@
-export * from "./proxy-protocol.js";
 export * from "./provider-support.js";
 export * from "./models.js";
 export * from "./status.js";
-export * from "./submission.js";
+export { AEX_RESERVED_ENV_PREFIX, BUILTIN_TOOL_NAMES, BuiltinTools, DEFAULT_BUILTIN_TOOLS, DEFAULT_OUTPUT_MODE, DEFAULT_RUN_PROVIDER, ENV_VARS_MAX_ENTRIES, ENV_VARS_MAX_TOTAL_BYTES, ENV_VARS_MAX_VALUE_BYTES, OUTPUT_MODES, PLATFORM_PACKAGE_ECOSYSTEMS, Providers, RUN_PROVIDERS, SECRETS_KEY, SECRET_ENV_NAME_PATTERN, SECRET_HANDLE_PATTERN, crossValidateSecretEnvAndValues, packageInstallString, parseInlineSecrets, parseRunLimits, parseRunProvider, parseRunSubmissionRequest, parseRunWebhook, parseSubmission, resolveBuiltinToolNames } from "./submission.js";
+export type { BuiltinToolName, JsonPrimitive, JsonValue, OutputMode, ParseRunSubmissionOptions, PlatformEnvironment, PlatformEnvironmentInput, PlatformInlineSecrets, PlatformInjectionConfig, PlatformMcpServerSecret, PlatformNetworking, PlatformOutputCaptureConfig, PlatformPackage, PlatformPackageEcosystem, PlatformPackageInput, PlatformRunSubmissionInput, PlatformRunSubmissionRequest, PlatformSecretEnvEntry, PlatformSubmission, RunLimits, RunMachine, RunProvider, RunWebhookSpec } from "./submission.js";
 export * from "./runtime-sizes.js";
 export * from "./runner-event.js";
 export * from "./event-envelope.js";
 export * from "./connection-ticket.js";
 export * from "./event-stream-client.js";
 export * from "./run-unit.js";
-export * from "./run-trace.js";
+export type { AssistantTextEntry, RunTrace, ToolCallResult, ToolCallTrace } from "./run-trace.js";
 export * from "./runtime-manifest.js";
 export * from "./runtime-security-profile.js";
 export * from "./run-record.js";
@@ -26,7 +26,6 @@ export * from "./webhook-verify.js";
 export * from "./http.js";
 export * from "./run-artifacts.js";
 export * as operations from "./operations.js";
-export * from "./proxy-validation.js";
 export * from "./sse.js";
 export { isRunFinished, isTextMessage, isToolCallResult, isToolCallStart } from "./event-guards.js";
 export type { RunFinishedRunEvent, TextMessageRunEvent, ToolCallResultRunEvent, ToolCallStartRunEvent } from "./event-guards.js";

package/dist/_contracts/index.js

@@ -1,15 +1,13 @@
-export * from "./proxy-protocol.js";
 export * from "./provider-support.js";
 export * from "./models.js";
 export * from "./status.js";
-export * from "./submission.js";
+export { AEX_RESERVED_ENV_PREFIX, BUILTIN_TOOL_NAMES, BuiltinTools, DEFAULT_BUILTIN_TOOLS, DEFAULT_OUTPUT_MODE, DEFAULT_RUN_PROVIDER, ENV_VARS_MAX_ENTRIES, ENV_VARS_MAX_TOTAL_BYTES, ENV_VARS_MAX_VALUE_BYTES, OUTPUT_MODES, PLATFORM_PACKAGE_ECOSYSTEMS, Providers, RUN_PROVIDERS, SECRETS_KEY, SECRET_ENV_NAME_PATTERN, SECRET_HANDLE_PATTERN, crossValidateSecretEnvAndValues, packageInstallString, parseInlineSecrets, parseRunLimits, parseRunProvider, parseRunSubmissionRequest, parseRunWebhook, parseSubmission, resolveBuiltinToolNames } from "./submission.js";
 export * from "./runtime-sizes.js";
 export * from "./runner-event.js";
 export * from "./event-envelope.js";
 export * from "./connection-ticket.js";
 export * from "./event-stream-client.js";
 export * from "./run-unit.js";
-export * from "./run-trace.js";
 export * from "./runtime-manifest.js";
 export * from "./runtime-security-profile.js";
 export * from "./run-record.js";
@@ -26,7 +24,6 @@ export * from "./webhook-verify.js";
 export * from "./http.js";
 export * from "./run-artifacts.js";
 export * as operations from "./operations.js";
-export * from "./proxy-validation.js";
 export * from "./sse.js";
 // Explicit re-export (shadows the same-named `AexEvent` guards from
 // `event-envelope.js`): the public `is*` guards narrow the loose `RunEvent`

package/dist/_contracts/operations.d.ts

@@ -1,6 +1,6 @@
 import type { HttpClient } from "./http.js";
 import type { RunUnit } from "./run-unit.js";
-import type { AgentsMdRecord, FileRecord, Output, OutputLink, OutputLinkOptions, OutputFileDownload, OutputFileSelector, OutputFileType, OutputQuery, OutputText, ReadOutputTextOptions, Run, RunEvent, RunListPage, RunListQuery, Session, SessionCreateRequest, SessionEvent, SessionListPage, SessionListQuery, SessionMessageAccepted, SessionMessageRequest, SessionStateChangeAccepted, RunWebhookDelivery, SecretRecord, SecretReveal, WhoAmI } from "./runtime-types.js";
+import type { AgentsMdRecord, FileRecord, Output, OutputLink, OutputLinkOptions, OutputFileDownload, OutputFileSelector, OutputFileType, OutputQuery, OutputText, ReadOutputTextOptions, Run, RunEvent, RunListPage, RunListQuery, Session, SessionCreateRequest, SessionEvent, SessionListPage, SessionListQuery, SessionMessageAccepted, SessionMessageRequest, SessionMessagesPage, SessionMessagesQuery, SessionStateChangeAccepted, RunWebhookDelivery, SecretRecord, SecretReveal, WhoAmI } from "./runtime-types.js";
 import type { PlatformRunSubmissionInput } from "./submission.js";
 /**
  * The single source of truth for SDK<->BFF transport. The SDK class
@@ -43,6 +43,7 @@ export declare function createSession(http: HttpClient, request: SessionCreateRe
 export declare function getSession(http: HttpClient, sessionId: string): Promise<Session>;
 export declare function listSessions(http: HttpClient, query?: SessionListQuery): Promise<SessionListPage>;
 export declare function sendSessionMessage(http: HttpClient, sessionId: string, request: SessionMessageRequest, options?: IdempotencyOptions): Promise<SessionMessageAccepted>;
+export declare function listSessionMessages(http: HttpClient, sessionId: string, query?: SessionMessagesQuery): Promise<SessionMessagesPage>;
 export declare function suspendSession(http: HttpClient, sessionId: string, options?: IdempotencyOptions): Promise<SessionStateChangeAccepted>;
 export declare function cancelSession(http: HttpClient, sessionId: string, options?: IdempotencyOptions): Promise<SessionStateChangeAccepted>;
 export declare function resumeSession(http: HttpClient, sessionId: string, options?: IdempotencyOptions): Promise<SessionStateChangeAccepted>;

package/dist/_contracts/operations.js

@@ -87,6 +87,16 @@ export async function sendSessionMessage(http, sessionId, request, options) {
         body: JSON.stringify(request)
     });
 }
+export async function listSessionMessages(http, sessionId, query) {
+    const params = {};
+    if (query?.limit !== undefined)
+        params.limit = String(query.limit);
+    if (query?.cursor !== undefined)
+        params.cursor = query.cursor;
+    if (query?.since !== undefined)
+        params.since = query.since;
+    return http.request(`/api/sessions/${encodeURIComponent(sessionId)}/messages`, {}, params);
+}
 export async function suspendSession(http, sessionId, options) {
     const headers = idempotencyHeaders(options);
     return http.request(`/api/sessions/${encodeURIComponent(sessionId)}/suspend`, { method: "POST", ...(headers ? { headers } : {}) });

package/dist/_contracts/run-config.d.ts

@@ -30,7 +30,7 @@
  * Keep this as the public source of truth for the SDK/CLI composition
  * boundary.
  */
-import { type JsonValue, type PlatformProxyEndpoint, type PlatformEnvironment } from "./submission.js";
+import { type JsonValue, type PlatformEnvironment } from "./submission.js";
 import { type RunModel } from "./models.js";
 import type { RuntimeSize } from "./runtime-sizes.js";
 /**
@@ -305,7 +305,6 @@ export interface RunRequestConfig {
     readonly runtimeSize?: RuntimeSize;
     /** Run deadline as a duration string (`"1h"`, `"30m"`); bounded [1m, 6h] server-side. */
     readonly timeout?: string;
-    readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];
     readonly metadata?: Readonly<Record<string, JsonValue>>;
 }
 /**
@@ -331,7 +330,6 @@ export interface NormalisedRunRequestConfig {
     readonly prompt: readonly string[];
     readonly mcpServers: readonly McpServerRef[];
     readonly environment?: PlatformEnvironment;
-    readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];
     readonly metadata?: Readonly<Record<string, JsonValue>>;
     /**
      * MCP servers whose run-config entry carried `headers`. Keyed by the `name`

package/dist/_contracts/run-config.js

@@ -602,7 +602,6 @@ export function parseRunRequestConfig(input) {
         "environment",
         "runtimeSize",
         "timeout",
-        "proxyEndpoints",
         "metadata"
     ]);
     for (const key of Object.keys(record)) {
@@ -622,8 +621,8 @@ export function parseRunRequestConfig(input) {
         ...(system !== undefined ? { system } : {}),
         prompt,
         ...(mcpServers !== undefined ? { mcpServers } : {}),
-        // environment / proxyEndpoints / metadata: passed through
-        // as-is — the BFF revalidates them via `parseRunSubmissionRequest`,
+        // environment / metadata: passed through as-is — the BFF revalidates
+        // them via `parseRunSubmissionRequest`,
         // so duplicating the heavyweight parsers here would mean two sources
         // of truth. The CLI surfaces structural errors at submission time.
         ...(record.environment !== undefined
@@ -635,9 +634,6 @@ export function parseRunRequestConfig(input) {
         ...(record.timeout !== undefined
             ? { timeout: record.timeout }
             : {}),
-        ...(record.proxyEndpoints !== undefined
-            ? { proxyEndpoints: record.proxyEndpoints }
-            : {}),
         ...(record.metadata !== undefined
             ? { metadata: record.metadata }
             : {})
@@ -699,7 +695,6 @@ export function normaliseRunRequestConfig(config) {
         prompt,
         mcpServers,
         ...(config.environment !== undefined ? { environment: config.environment } : {}),
-        ...(config.proxyEndpoints !== undefined ? { proxyEndpoints: config.proxyEndpoints } : {}),
         ...(config.metadata !== undefined ? { metadata: config.metadata } : {}),
         mcpServerSecrets
     };

package/dist/_contracts/run-trace.d.ts

@@ -1,114 +1,28 @@
-/**
- * Typed decoders for a `listEvents(runId)` stream.
- *
- * `listEvents` returns the loose {@link RunEvent} wire shape: `type` at the top
- * level, but the tool name at `data.name`, the call args at `data.arguments`,
- * assistant text at `data.text`, and — the awkward part — a `TOOL_CALL_RESULT`
- * carries no name, so a consumer must correlate each result back to its
- * `TOOL_CALL_START` by `data.id` (the tool-call id). Every consumer ended up
- * re-implementing that correlation; these helpers do it once, typed and pure.
- *
- * They are total and side-effect-free: pass the array `listEvents` returns and
- * get back structured traces. Unknown event types are ignored (forward-compat),
- * a result with no matching start surfaces as an orphan (never dropped silently),
- * and timing falls back gracefully when a `recordedAt` is absent.
- *
- * `summarizeRunUsage` remains tolerant of historical/internal `aex.usage`
- * CUSTOM records when a caller has them, but the normal public `listEvents`
- * stream is not the live usage-reporting surface. Settled provider/runtime
- * usage is exposed through the run's `costTelemetry`.
- */
 import type { UsageSummary } from "./runtime-types.js";
-/**
- * One decoded tool call: the `TOOL_CALL_START` and its correlated
- * `TOOL_CALL_RESULT` (when present), with timing. `result` is undefined while a
- * call is still in flight (the start has arrived but not the result), so a
- * mid-run decode shows in-progress calls honestly rather than dropping them.
- */
 export interface ToolCallTrace {
-    /** The tool-call id (`data.id`) that pairs the start with its result. */
     readonly id: string;
-    /** The tool name (from the `TOOL_CALL_START`). */
     readonly name: string;
-    /** The call arguments (`data.arguments`), or `{}` when absent. */
     readonly args: Readonly<Record<string, unknown>>;
-    /** The id of the assistant message that issued the call, when present. */
     readonly messageId?: string;
-    /** Event sequence of the `TOOL_CALL_START` (ordering within the run). */
     readonly startSeq?: number;
-    /** ISO-8601 time of the `TOOL_CALL_START`, when the event carried one. */
     readonly startedAt?: string;
-    /** The correlated result; undefined while the call is still in flight. */
     readonly result?: ToolCallResult;
-    /** Result wall-clock minus start wall-clock (ms); undefined if either time is missing. */
     readonly durationMs?: number;
 }
-/** The result half of a {@link ToolCallTrace}, decoded from `TOOL_CALL_RESULT`. */
 export interface ToolCallResult {
-    /** True when the tool reported an error (`data.isError`). */
     readonly isError: boolean;
-    /** The tool's result content, passed through verbatim (`data.content`). */
     readonly content: unknown;
-    /** Event sequence of the `TOOL_CALL_RESULT`. */
     readonly seq?: number;
-    /** ISO-8601 time of the `TOOL_CALL_RESULT`, when the event carried one. */
     readonly recordedAt?: string;
 }
-/** One assistant text block, decoded from a `TEXT_MESSAGE_CONTENT` event. */
 export interface AssistantTextEntry {
     readonly text: string;
     readonly messageId?: string;
     readonly seq?: number;
     readonly recordedAt?: string;
 }
-/**
- * A decoded view of a run's event stream: the correlated tool calls, the
- * aggregate token usage, and the assistant text — everything a consumer
- * previously hand-decoded from `listEvents`.
- */
 export interface RunTrace {
     readonly toolCalls: readonly ToolCallTrace[];
     readonly usage: UsageSummary;
     readonly text: readonly AssistantTextEntry[];
 }
-/** The loose event shape these decoders read — the {@link RunEvent} subset they touch. */
-interface TraceEvent {
-    readonly type: string;
-    readonly seq?: number;
-    readonly recordedAt?: string;
-    readonly data?: unknown;
-    readonly [key: string]: unknown;
-}
-/**
- * Decode a `listEvents` stream into correlated tool-call traces, in start order.
- *
- * Each `TOOL_CALL_START` opens a trace keyed by `data.id`; the matching
- * `TOOL_CALL_RESULT` (same `data.id`) fills in `result` + `durationMs`. A result
- * whose id never had a start is surfaced as an orphan trace (empty `name`, no
- * `args`) rather than dropped, so a partial/mis-ordered stream never hides a
- * result. Pure — no I/O, input is not mutated.
- */
-export declare function decodeToolCalls(events: readonly TraceEvent[]): readonly ToolCallTrace[];
-/**
- * Sum any `aex.usage` CUSTOM events present in the supplied stream into one
- * {@link UsageSummary}. This is mainly for historical/internal event arrays;
- * current public reads expose settled provider usage through cost telemetry.
- * `totalTokens` is the sum of input + output tokens. Pure.
- */
-export declare function summarizeRunUsage(events: readonly TraceEvent[]): UsageSummary;
-/**
- * The run's final assistant text: every `TEXT_MESSAGE_CONTENT` block in stream
- * order, concatenated. The one-line "what did the agent say" accessor over
- * {@link decodeAssistantText} (buffered mode yields whole messages, stream mode
- * yields token deltas — both concatenate correctly). Pure.
- */
-export declare function textOf(events: readonly TraceEvent[]): string;
-/** Decode the assistant text blocks (`TEXT_MESSAGE_CONTENT`) in stream order. Pure. */
-export declare function decodeAssistantText(events: readonly TraceEvent[]): readonly AssistantTextEntry[];
-/**
- * Decode a whole `listEvents` stream in one pass: correlated tool calls,
- * aggregate {@link UsageSummary}, and assistant text. Convenience over the three
- * focused decoders; pure.
- */
-export declare function summarizeRunTrace(events: readonly TraceEvent[]): RunTrace;
-export {};

package/dist/_contracts/run-trace.js

@@ -1,185 +1,2 @@
-/**
- * Typed decoders for a `listEvents(runId)` stream.
- *
- * `listEvents` returns the loose {@link RunEvent} wire shape: `type` at the top
- * level, but the tool name at `data.name`, the call args at `data.arguments`,
- * assistant text at `data.text`, and — the awkward part — a `TOOL_CALL_RESULT`
- * carries no name, so a consumer must correlate each result back to its
- * `TOOL_CALL_START` by `data.id` (the tool-call id). Every consumer ended up
- * re-implementing that correlation; these helpers do it once, typed and pure.
- *
- * They are total and side-effect-free: pass the array `listEvents` returns and
- * get back structured traces. Unknown event types are ignored (forward-compat),
- * a result with no matching start surfaces as an orphan (never dropped silently),
- * and timing falls back gracefully when a `recordedAt` is absent.
- *
- * `summarizeRunUsage` remains tolerant of historical/internal `aex.usage`
- * CUSTOM records when a caller has them, but the normal public `listEvents`
- * stream is not the live usage-reporting surface. Settled provider/runtime
- * usage is exposed through the run's `costTelemetry`.
- */
-const CUSTOM_USAGE_NAME = "aex.usage";
-/** snake_case `aex.usage` field → the camelCase {@link UsageSummary} field. */
-const USAGE_FIELD_MAP = {
-    input_tokens: "inputTokens",
-    output_tokens: "outputTokens",
-    cache_read_input_tokens: "cacheReadInputTokens",
-    cache_creation_input_tokens: "cacheCreationInputTokens"
-};
-/**
- * Decode a `listEvents` stream into correlated tool-call traces, in start order.
- *
- * Each `TOOL_CALL_START` opens a trace keyed by `data.id`; the matching
- * `TOOL_CALL_RESULT` (same `data.id`) fills in `result` + `durationMs`. A result
- * whose id never had a start is surfaced as an orphan trace (empty `name`, no
- * `args`) rather than dropped, so a partial/mis-ordered stream never hides a
- * result. Pure — no I/O, input is not mutated.
- */
-export function decodeToolCalls(events) {
-    const order = [];
-    const byId = new Map();
-    for (const event of events) {
-        const data = asRecord(event.data);
-        if (event.type === "TOOL_CALL_START") {
-            const id = asString(data.id);
-            if (id === undefined)
-                continue;
-            const trace = {
-                id,
-                name: asString(data.name) ?? "",
-                args: asRecord(data.arguments)
-            };
-            const messageId = asString(data.messageId);
-            if (messageId !== undefined)
-                trace.messageId = messageId;
-            if (typeof event.seq === "number")
-                trace.startSeq = event.seq;
-            if (typeof event.recordedAt === "string")
-                trace.startedAt = event.recordedAt;
-            if (!byId.has(id))
-                order.push(id);
-            byId.set(id, trace);
-            continue;
-        }
-        if (event.type === "TOOL_CALL_RESULT") {
-            const id = asString(data.id);
-            if (id === undefined)
-                continue;
-            const result = {
-                isError: data.isError === true,
-                content: data.content ?? null
-            };
-            if (typeof event.seq === "number")
-                result.seq = event.seq;
-            if (typeof event.recordedAt === "string")
-                result.recordedAt = event.recordedAt;
-            let trace = byId.get(id);
-            if (trace === undefined) {
-                // Orphan result (no matching start) — surface it, never drop it.
-                trace = { id, name: "", args: {} };
-                order.push(id);
-                byId.set(id, trace);
-            }
-            trace.result = result;
-            const duration = durationMs(trace.startedAt, result.recordedAt);
-            if (duration !== undefined)
-                trace.durationMs = duration;
-            continue;
-        }
-    }
-    return order.map((id) => byId.get(id));
-}
-/**
- * Sum any `aex.usage` CUSTOM events present in the supplied stream into one
- * {@link UsageSummary}. This is mainly for historical/internal event arrays;
- * current public reads expose settled provider usage through cost telemetry.
- * `totalTokens` is the sum of input + output tokens. Pure.
- */
-export function summarizeRunUsage(events) {
-    const totals = { inputTokens: 0, outputTokens: 0, cacheReadInputTokens: 0, cacheCreationInputTokens: 0 };
-    let seen = false;
-    for (const event of events) {
-        if (event.type !== "CUSTOM")
-            continue;
-        const data = asRecord(event.data);
-        if (asString(data.name) !== CUSTOM_USAGE_NAME)
-            continue;
-        const value = asRecord(data.value);
-        for (const [snake, camel] of Object.entries(USAGE_FIELD_MAP)) {
-            const n = value[snake];
-            if (typeof n === "number" && Number.isFinite(n)) {
-                totals[camel] += n;
-                seen = true;
-            }
-        }
-    }
-    if (!seen)
-        return {};
-    return {
-        inputTokens: totals.inputTokens,
-        outputTokens: totals.outputTokens,
-        cacheReadInputTokens: totals.cacheReadInputTokens,
-        cacheCreationInputTokens: totals.cacheCreationInputTokens,
-        totalTokens: totals.inputTokens + totals.outputTokens
-    };
-}
-/**
- * The run's final assistant text: every `TEXT_MESSAGE_CONTENT` block in stream
- * order, concatenated. The one-line "what did the agent say" accessor over
- * {@link decodeAssistantText} (buffered mode yields whole messages, stream mode
- * yields token deltas — both concatenate correctly). Pure.
- */
-export function textOf(events) {
-    return decodeAssistantText(events).map((entry) => entry.text).join("");
-}
-/** Decode the assistant text blocks (`TEXT_MESSAGE_CONTENT`) in stream order. Pure. */
-export function decodeAssistantText(events) {
-    const out = [];
-    for (const event of events) {
-        if (event.type !== "TEXT_MESSAGE_CONTENT")
-            continue;
-        const data = asRecord(event.data);
-        const text = asString(data.text);
-        if (text === undefined)
-            continue;
-        const entry = { text };
-        const messageId = asString(data.messageId);
-        if (messageId !== undefined)
-            entry.messageId = messageId;
-        if (typeof event.seq === "number")
-            entry.seq = event.seq;
-        if (typeof event.recordedAt === "string")
-            entry.recordedAt = event.recordedAt;
-        out.push(entry);
-    }
-    return out;
-}
-/**
- * Decode a whole `listEvents` stream in one pass: correlated tool calls,
- * aggregate {@link UsageSummary}, and assistant text. Convenience over the three
- * focused decoders; pure.
- */
-export function summarizeRunTrace(events) {
-    return {
-        toolCalls: decodeToolCalls(events),
-        usage: summarizeRunUsage(events),
-        text: decodeAssistantText(events)
-    };
-}
-function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function asString(value) {
-    return typeof value === "string" ? value : undefined;
-}
-function durationMs(start, end) {
-    if (start === undefined || end === undefined)
-        return undefined;
-    const a = Date.parse(start);
-    const b = Date.parse(end);
-    if (!Number.isFinite(a) || !Number.isFinite(b))
-        return undefined;
-    const delta = b - a;
-    return delta >= 0 ? delta : undefined;
-}
+export {};
 //# sourceMappingURL=run-trace.js.map

package/dist/_contracts/run-unit.d.ts

@@ -3,8 +3,7 @@
  *
  * One canonical struct that captures every non-secret artifact persisted
  * for a single run: parsed submission inputs, status/lifecycle, attempts,
- * indexed events, raw-event Storage manifest, outputs (+ capture
- * failures), and the proxy-call audit log.
+ * indexed events, raw-event Storage manifest, outputs, and capture failures.
  *
  * Wire contract for `GET /api/runs/:runId`, the per-run archive's
  * `run.json`/`submission.json`/`caps.json`, and the SDK/CLI
@@ -19,7 +18,7 @@
  * detail response stays bounded). The archive zip carries the bytes.
  */
 import type { CleanupStatus } from "./status.js";
-import type { JsonValue, PlatformSubmission, PlatformProxyEndpoint } from "./submission.js";
+import type { JsonValue, PlatformSubmission } from "./submission.js";
 /**
  * Parsed view of the legacy run snapshot jsonb. Stored shape is
  * `{kind:"submission", submission}` written by the hosted API's
@@ -97,26 +96,6 @@ export interface RunUnitOutputCaptureFailure {
     readonly errorMessage?: string;
     readonly createdAt: string;
 }
-export interface RunUnitProxyCall {
-    readonly id: string;
-    readonly endpointName: string;
-    readonly method: string;
-    readonly requestPathRedacted: string | null;
-    readonly requestByteSize: number;
-    readonly responseStatus: number | null;
-    readonly responseByteSize: number;
-    readonly outcome: string;
-    readonly errorClass: string | null;
-    readonly startedAt: string;
-    readonly finishedAt: string | null;
-    readonly durationMs: number | null;
-}
-export interface RunUnitProxyCallPage {
-    readonly entries: readonly RunUnitProxyCall[];
-    readonly totalCount: number;
-    readonly truncated: boolean;
-    readonly nextCursor?: string;
-}
 export interface RunUnit {
     readonly id: string;
     readonly workspaceId: string;
@@ -131,14 +110,12 @@ export interface RunUnit {
     readonly attemptCount: number;
     readonly submission: RunUnitSubmission;
     readonly capsSnapshot?: Record<string, JsonValue>;
-    readonly proxyEndpointsSnapshot?: readonly PlatformProxyEndpoint[];
     readonly attempts: readonly RunUnitAttempt[];
     readonly events: RunUnitEventPage;
     readonly rawEventPages: readonly RunUnitRawEventPage[];
     readonly outputs: readonly RunUnitOutput[];
     readonly outputCaptureFailures: readonly RunUnitOutputCaptureFailure[];
     readonly costTelemetry?: import("./run-cost.js").RunCostTelemetry;
-    readonly proxyCalls: RunUnitProxyCallPage;
     /**
      * Per-run, per-provider runtime manifest — derived from the validated
      * submission + the chosen provider (`buildRuntimeManifest`). Tells

package/dist/_contracts/run-unit.js

@@ -3,8 +3,7 @@
  *
  * One canonical struct that captures every non-secret artifact persisted
  * for a single run: parsed submission inputs, status/lifecycle, attempts,
- * indexed events, raw-event Storage manifest, outputs (+ capture
- * failures), and the proxy-call audit log.
+ * indexed events, raw-event Storage manifest, outputs, and capture failures.
  *
  * Wire contract for `GET /api/runs/:runId`, the per-run archive's
  * `run.json`/`submission.json`/`caps.json`, and the SDK/CLI

package/dist/_contracts/runtime-manifest.d.ts

@@ -39,7 +39,7 @@ export interface RuntimeManifest {
     readonly assetsRoot: string;
     /** Absolute path of the in-container aex runtime bridge (invoke via `bun`). */
     readonly aexCli: string;
-    /** Absolute path of the per-run proxy-endpoints manifest. */
+    /** Absolute path of the in-container aex runtime index. */
     readonly indexJson: string;
     /** Absolute path of the always-mounted aex runtime contract README. */
     readonly readme: string;

package/dist/_contracts/runtime-security-profile.d.ts

@@ -6,14 +6,12 @@ export interface RuntimeSecurityProfile {
     readonly allowOpenNetworking: boolean;
     readonly allowRuntimePackages: boolean;
     readonly allowCustomerEnvVars: boolean;
-    readonly allowProxyEndpoints: boolean;
     readonly allowMcpServers: boolean;
 }
 export interface RuntimeSecurityProfileEvaluationInput {
     readonly networkingMode?: "limited" | "open";
     readonly packageCount?: number;
     readonly customerEnvVarCount?: number;
-    readonly proxyEndpointCount?: number;
     readonly mcpServerCount?: number;
 }
 export interface RuntimeSecurityProfileViolation {

package/dist/_contracts/runtime-security-profile.js

@@ -6,7 +6,6 @@ export const RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
         allowOpenNetworking: false,
         allowRuntimePackages: false,
         allowCustomerEnvVars: true,
-        allowProxyEndpoints: true,
         allowMcpServers: true
     }),
     standard: Object.freeze({
@@ -15,7 +14,6 @@ export const RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
         allowOpenNetworking: true,
         allowRuntimePackages: true,
         allowCustomerEnvVars: true,
-        allowProxyEndpoints: true,
         allowMcpServers: true
     }),
     developer: Object.freeze({
@@ -24,7 +22,6 @@ export const RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
         allowOpenNetworking: true,
         allowRuntimePackages: true,
         allowCustomerEnvVars: true,
-        allowProxyEndpoints: true,
         allowMcpServers: true
     })
 });
@@ -65,12 +62,6 @@ export function evaluateRuntimeSecurityProfile(profileName, input) {
             reason: `${profile.name} does not allow customer runtime env vars`
         });
     }
-    if ((input.proxyEndpointCount ?? 0) > 0 && !profile.allowProxyEndpoints) {
-        violations.push({
-            field: "proxyEndpoints",
-            reason: `${profile.name} does not allow HTTP proxy endpoints`
-        });
-    }
     if ((input.mcpServerCount ?? 0) > 0 && !profile.allowMcpServers) {
         violations.push({
             field: "submission.mcpServers",